CN1906941A - Multiple selective encryption with DRM - Google Patents

Abstract

A method of encrypting a digital television signal consistent with certain embodiments involves examining unencrypted packets of data in the digital television signal to identify a packet type; duplicating packets identified as being of the packet type to create first and second duplicate packets; encrypting the first duplicate packets according to a conditional access encryption method to create conditional access encrypted packets; encrypting the second duplicate packets according to a Digital Rights Management (DRM) encryption method to create DRM encrypted packets; and replacing the unencrypted packets of the packet type with the conditional access encrypted packets and the DRM encrypted packets in the digital television signal to produce a multiple partially encrypted digital television signal. This abstract is not to be considered limiting, since other embodiments may deviate from the features described in this abstract.

Description

Utilize the multiple selective encryption of DRM

The cross reference of pertinent literature

The application requires the priority of the 20042/3/ U.S. Provisional Patent Application sequence number of submitting to 60/541,339, and it is incorporated into this paper by reference.This application also relates to the U.S. Patent Application Serial Number of having announced 10/038,217; Sequence number 10/038,032; Sequence number 10/037,914; Sequence number 10/037,499; And sequence number 10/037,498, they are all submitted on January 2nd, 2002, and are incorporated into this paper by reference.

Copyright notice

The part disclosure of patent document comprises data protected by copyright.The copyright owner does not oppose that the file that can get by United States Patent and Trademark Office or record slavish copying patent document or this patent are open, in any case but all keep all copyrights.

Background technology

A kind of normal cable system layout of explanation among Fig. 1.In this system, the cable operator uses CA encryption device 18 with the A of system compatibility to be used to CA technical finesse audio/video (A/V) content 14 from the A of manufacturer (system A) at cable system head end 22.A/V content of encrypting and system information (SI) 26 and program specific information (PSI) 27 are multiplexed in together, and are sent to user's STB 36 by cable system 32.STB 36 combinations are from the deciphering CA equipment 40 of this A/V content of deciphering of the A of system (A of manufacturer).The A/V content of deciphering can be provided to television set 44 then watches for the user.

In cable system, digital program stream is split into grouping transmit as Fig. 1.Come the grouping of mark with packet identifier or PID corresponding to each part of each program (video, audio frequency, auxiliary data etc.).Pairing these stream of packets of each part of all programs of carrying pool a combined-flow in the channel.Comprise that also additional packet is to provide decruption key and other Overhead.Otherwise, fill untapped bandwidth with the sky grouping.The bandwidth budget usually is adjusted into and utilizes about 95% of available channel bandwidth.

Overhead usually comprises vectoring information, it describe what program can with and how to locate channel and the part that is associated.This vectoring information is also referred to as system information or SI.SI can be in band (coded data part in the channel) or be with outside (use is exclusively used in this purpose special channel) be sent to STB.The SI that transmits in electric mode can be with conventionally form more by the grid of issuing on part copy-newspaper or the magazine (grid).

Digital copyright management (DRM) is becoming a kind of more and more important mechanism that is used to protect the content of copyright that distribution uses for the client.As an example, DRM can use in the occasion of DTV receiver device (for example set-top box or television receiver), so that film that receives from cable operator with digital form record and the number of times that playback is set on a period of time.As another example, DRM only can be used for specifying and can go up playback at specific device (set-top box that for example has CD drive, i.e. personal video record or PVR).

Brief description

In conjunction with following accompanying drawing, can understand explanation tissue and method of operation some illustrative embodiment best, wherein together with purpose and advantage with reference to hereinafter detailed description:

Fig. 1 is the block diagram of normal condition visit cable system.

Fig. 2 is the block diagram of the embodiment of the cable system that conforms to some embodiment of the present invention.

Fig. 3 is another block diagram of the cable system that conforms to some embodiment of the present invention.

Fig. 4 is the flow chart that the demonstration coding that conforms to some embodiment of the present invention is described.

Fig. 5 is the remap flow chart of process of the deciphering that conforms to some embodiment of the present invention of explanation and PID.

Fig. 6 is the block diagram of the gateway STB of the multiple selective encryption service of providing of conforming to some embodiment of the present invention.

Fig. 7 is the operational flowchart of gateway STB and the electrical equipment that is associated on the explanation home network consistent with certain embodiments of the invention.

Fig. 8 is the block diagram of the exemplary gateway STB that conforms to some embodiment of the present invention.

Describe in detail

The present invention allows many multi-form embodiment, and diagram a plurality of specific embodiments and describe this a plurality of specific embodiments in detail in the accompanying drawing, wherein be interpreted as this type of embodiment openly should be considered as the example of the principle of the invention and be not to limit the invention to shown in and described these specific embodiments.In the explanation, similar reference signs is used for describing identical, the similar or corresponding components of a plurality of accompanying drawings hereinafter.

Term used herein " one " is defined as one or more than one.Term used herein " a plurality of " is defined as two or more.Term used herein " another " be defined as at least the two or more.Term used herein " comprises " and/or " having " is defined as and comprises (being open language).Term used herein " coupling " is defined as connection, though not necessarily directly connect, also not necessarily mechanical system connects.Term used herein " program " definition becomes on computer system to be carried out and the command sequence of design." program " or " computer program " can comprise subroutine, function, process, object method, object realization, executable application programs, applet, servlet, source code, object identification code, shared library/dynamic load library and/or for carry out other command sequences that design on computer system.

Term " scrambling " and " encryption " and variation thereof are made synonym in this article and are used.Term " video " can be used for not only containing real visual information in this article, and (for example " video tape recorder ") not only contained vision signal but also contained audio frequency and the data that are associated on conventional meaning.Document of the present invention generally uses the example of " double selectivity encryption " embodiment, but those skilled in the art will recognize that and can utilize the present invention to realize that a plurality of parts encrypt and do not deviate from the present invention.Term " part is encrypted " and/or " selective encryption " are made synonym in this article and are used.Term " program " and " TV programme " and the meaning interpretation routinely of similar term, and represent that with this term wherein the implication of any fragment of the A/V content that can show explains on television set or similar monitoring arrangement.

The prior art that refers to be used for existing cable and satellite system " left over " in term used herein.Example embodiment disclosed herein can be decoded by TV set-top box (STB), soon will be incorporated in all types of television receivers but be susceptible to this technology, no matter these television receivers are to place shell separately or receive with record and/or playback equipment or condition that (CA) deciphering module combines or itself is integrated in the television set.

Document of the present invention generally uses the example of " two part encryption " embodiment, but those skilled in the art will recognize that and can utilize the present invention to realize that many parts encrypt and do not deviate from the present invention.

For the purpose of this document is described, between conditional access (CA) and digital copyright management (DRM), delimit difference.In general, leave over a kind of form that CA can be considered as DRM, because it is by using the undelegated measure of watching the digital publishing rights that a kind of owner of management is provided that prevents of encrypting.Similarly, DRM can be considered as a type of conditional access.Thus, should delimit difference.

In leaving over CA, use authority control messages and/or entitlement management message (contain or do not contain smart card or CableCard ^TM) recipient's view content to allow or to forbid encrypted content.Thus, leave over a kind of simpler form that CA system (or this paper abbreviates the CA system as) can be regarded as DRM, it relates to simple purchase and to the real time access of program.CA is left in utilization, allows as " the fair use " of general programs standard definition simulation output to be recorded to VCR.For pay content, control by the copy control technology that provides as Macrovision and to record.

Up to now, TV set-top box does not have the ability with digital store or output content, and the past does not have home networking." home network " relates to the domestic consumer and with manual mode the VHS that records moved on to another from a VCR.Therefore, leave over processing that CA relates generally to key with real-time mode to contents decryption.By contrast, term DRM is used to represent a kind of more ripe protection form, wherein can apply added limitations to the use of content leaving on the mechanism that the CA system provides or be higher than this mechanism.

Mandate of using among the DRM and key management method and to leave over CA be incompatible, unless and standardization, otherwise incompatible each other.Along with digital video recorder (DVR) (is also referred to as the development of personal video record (PVR), digital content can be stored in the set-top box together with the metadata of controlling its use with the resolution that transmits now.This content can be stored in inside or external fixed disk drive or be recorded on the DVD.Content supplier needs content distributor that digital content is maintained secrecy.CA is left in use, can with cipher mode hard disk drive and DVD tethers be arrived particular set-top box as follows: content-encrypt to this medium, is being deciphered this content with it from the medium reception then when going back.The content that set-top box is recorded can not be play in other set-top box, and can not have the term of validity except on hard disk drive, finally uses up the capacity of driver and beholder and need wipe content and could be the fresh content vacating space.But be to use DRM, can share the content of recording with other devices and electrical equipment now, and the content of recording can have the service regeulations of wider scope.DRM knows that service regeulations of these wider scope and client wish to share the electrical equipment and the network at content place.

The playback of this content can be followed the expansion service regeulations.For example, in the DRM system, retrain based on the number of times of time, destination apparatus, broadcast or other and to set up copyright.In current DRM system, determine this type of copyright by one group of DRM metadata accompanying with this content.Can adopt the mode that generates key or be input to the data of secret key decryption operation that this metadata is carried out hash.In this way metadata is carried out hash and generate key or the data input value is a kind of mode of authorize metadata to prevent that the hacker from handling.This type of DRM metadata comprises service regeulations, these service regeulations are used to control to set-top box and the licensing of device that be connected to the set-top box on the home network, and adopt use to leave over the controllable mode of CA encrypt/decrypt mechanism mode in addition and prevent unauthorized use content, leave over recording that CA encrypt/decrypt mechanism generally only allows to use immediately and " use rationally " simulation is exported.

Leave over CA generally by authorization messages (authorization control message and entitlement management message) control, with the key that uses in the management decrypting process.DRM is a kind of encryption system of metadata driven, can implement the more ripe restriction that the service regeulations by a part that forms metadata apply.Unrestricted by example, following table proposes some examples in the ability of leaving over the DRM on the ability of CA:

Functional character	The subfunction feature	CA	DRM
				Payment is implemented
	Pay decruption key	Be	Be
					Can consult to upgrade decruption key	Not	Be
Use and management
					The real-time consumption broadcasted content	Be	Be
	The content of recording can be play on the device of at first recording this content.Content is recorded in the cipher mode tethers on the embedded hard disc driver or driver of set-top box.	Be (only use and contents decryption is also encrypted once more) for the known local key of set-top box	Be
					The content of recording can be play on other relevant devices, for example can play on other set-top box of same manufacturer (and the same owner of possibility)	Not	Be
	The content of recording can be play on multiple portable electronics	Not	Be
					Metering is paid and is used a model	Not	Be
	Pay fees by the hour and use a model	Not	Be
				Copy control
	Copy control (for example Macrovision) to simulation output	Be	Be
					Pay the copy control information, for example copy expense, copy once, no longer copy, never will copy from security functions and output to the set-top box that allows unusual basic contents to control	Be (CA uses this information is sent to other set-top box application)	It is (DRM keeps the control to copy state)
	Allow the copy control information that repeatedly copies	Not	It is (DRM keeps the control to copy state)
					The output selected control to multiple digital interface	Not	Be

Thus, for this document is described, DRM can be considered as surpassing by any way any encryption system of the general utility functions of leaving over the CA system.But it should be noted that the characteristic owing to most of CA and DRM system, last table and argumentation should be considered as general guiding, and should not be considered as strict the restriction.

Along with the development of home network, can between device, share digital content.Set-top box utilizes Ethernet to be connected structure with IEEE 1394 at present, and it allows the digital content of share compressed between the device, for example TV, PDA(Personal Digital Assistant) and the digital VCR that authorize.Problem is, all devices all must have general DRM scheme and come received content at present.The control of DRM technology is regarded as strategic importance degree for many companies, this technology is included in as having large drag forces in the expensive of TV and digital VCR etc. and the electrical equipment that generally uses.

The U.S. Patent Application Serial Number 10/038,217 that the technology of " selective encryption " or " part encrypt " of being called is being announced; Sequence number 10/038,032; Sequence number 10/037,914; Sequence number 10/037,499; And in the sequence number 10/037,498 description being arranged, they all submit and are incorporated into by reference this paper on January 2nd, 2002.

Above-mentioned patent application of quoting has been described and relevantly has been commonly referred to as at this paper that part is encrypted or the invention of a plurality of different aspects of the method for selective encryption.More specifically, described wherein use two kinds of (or two or more) encryption technologies to come encrypted digital content regioselective selected portion simultaneously the remainder of this content keep the system do not encrypt.By the part of suitably selecting to encrypt, can be effectively to content-encrypt, under multiple decryption system, using, and need not the whole selection of content is encrypted.In certain embodiments, only need a few percent of accessing cost for data, just can use multiple encryption system effectively to content-encrypt.Making like this that cable or satellite system can utilize the set-top box of how tame manufacturer or condition to receive other enforcements of (CA) receiver-make thus cable or satellite company in individual system needn't be to the purchase of bidding of set-top box provider.

Under some embodiment that conforms to the present invention, the one or more encryption systems that use in the multiple selective encryption system can be associated with the DRM scheme.

In other embodiment that conform to the present invention, can receive 100% content of encrypting from the service provider.To the contents decryption of encrypting, carry out multiple selective d RM by the gateway machine top box then and encrypt for the multiple electrical equipment use in the home network.Device in the home network can be selected from two or more DRM technology.Can be in real time to the content of content decoding or storage multi-enciphering.Beyond the encoded question, for example music content can be Apple DRM and Microsoft (MS) media player DRM coding.This content can upward and on the mancarried device of support MS media player be play at AppleIPOD (supporting Apple DRM).

In other embodiments, this content can be CA and DRM multi-enciphering.Gateway can be sent to the encryption of these two kinds of forms in the home network.Perhaps, it can only select DRM to encrypt or only select CA to encrypt (if not having the device of DRM function) to send in the home network with grouping expressly.

DRM encrypts and can include home network in consideration by allowing electrical equipment in the family to share directly from head end or service provider's content.Perhaps, can revise DRM by the gateway machine top box and encrypt, with after buying at its particular home network customization content.Perhaps, can export synthesize the DRM encryption based on the control figure of selecting by the gateway machine top box, for example based on IEEE 1394 or Microsoft media player DRM Digital Transmission Copy Protection (DTCP).

Many digital cable network utilize the CA system of complete enciphered digital Voice ﹠ Video to make the program with the open air can not be accessed except for what be fit to subscribe.This encryption is used to stop hacker and non-subscribing user to receive unpaid program.But, because cable operator wishes to provide any one set-top box in a plurality of manufacturers to their subscribing user, so they utilize a plurality of copies of the single program of the multiple encryption technology encryption that conforms to the CA system of each STB manufacturer to implement because of needs transmit.This problem even further worsen because cable operator wishes to implement to use the further content control that DRM arranges.

The patent application of above quoting has been described and has wherein been used two kinds of (or two or more) encryption technologies to come the regioselective selected portion of digital content is encrypted the system that the remainder reservation of this content is not simultaneously encrypted.In certain embodiments by using a plurality of packet identifiers to identify and distinguish the part of encryption one by one.By the part of suitably selecting to encrypt, can be effectively to content-encrypt, under multiple decryption system, using, and need not the whole selection of content is encrypted.In certain embodiments, only need a few percent of accessing cost for data, just can use multiple encryption system effectively to content-encrypt.Making like this that cable or satellite system can utilize the set-top box of how tame manufacturer or condition to receive other enforcements of (CA) receiver-make thus cable or satellite company in individual system needn't be to the purchase of bidding of set-top box provider.This notion can extend further to and contain DRM encryption (being associated so that the encryption of additional content control to be provided with the DRM scheme).According to the embodiment that conforms to the present invention, the one or more of these encryption systems that are used for multiple selective encryption can be the DRM systems.

Use the technology of describing in the patent application of above quoting, the employed encryption technology of principle that is proposed in the patent application of quoting as mentioned is selectively used for data flow, but not entire stream is encrypted.This technology also can be applicable to DRM and encrypts.In general, be not that the selective encryption process utilizes the Intelligence Selection of information to encrypt, and need not whole program thus and all passes through double-encryption as qualification.By suitably selecting to want ciphered data, can be effectively to the program material scrambling, and to the attempt intrusion system and not restore those people of commercial content in illegal mode hiding with paying.MPEG (or the similar form) data that are used to represent the Voice ﹠ Video data are used to trust based on the height of the information redundance of frame one by one and are realized this purpose." anchor point " data that some data can be used as expression colourity and brightness data transmit.Usually only need then these data are moved at screen periphery, to generate subsequent frame by the motion vector that moves that sends description block.Change in colourity and the brightness data also is encoded to variation, but not the record of absolute anchor point data.Thus, for example the encryption of these anchor point data or other key datas can make video watch effectively.

According to some embodiment of conforming to of invention above, the selected video data that encrypt can be any independent or the combination of following (having a detailed description in application above): appear at the piece of video paragraph header in the zone of action of frame of video, the data of the zone of action of expression frame of video, the data of star schema in the frame of video, the data that the expression scene changes, the grouping of I frame, comprise the grouping of the motion vector in I frame first P frame afterwards, be provided with the grouping of intra_slice_flag group of indicators, be provided with the grouping of intra_slice group of indicators, include the grouping of intra_coded macro block, the data that include the fragment of intra_coded macro block, data from first macro block after the piece of video paragraph header, the P frame data that comprise the video data that is used for asymptotic refreshing, the grouping of piece of video paragraph header and anchor point data, on the frame of video with the data of vertical and/or horizontal moat shape pattern setting and the data that make any other selection that video and/or audio is difficult to utilize.Disclose multiple this type of technology and other technologies in the patent application of above quoting, their any (or other technologies) can cooperate the present invention to be used for only the part of content being encrypted.

In order between two or more digital television signal that uses according to the multi-enciphering algorithm for encryption of some embodiment that conforms to invention above, to distinguish mutually, utilize a plurality of packet identifiers (PID).Usually, use a component group identifier to identify specific TV programme.When under the described multiple selective encryption layout of the application of above quoting TV signal being encrypted, give first group of PID to clear content, and give another group PID (content of a group encryption can be shared identical PID with the unencrypted content in certain embodiments) the content of every group encryption.Receive STB then the content that all are fit to is remapped to single PID for playback.Above describing this process in detail in the patent application.

With reference now to Fig. 2,, wherein will reduce and use DRM to plant to provide the system embodiment of the required additional bandwidth of multi-enciphering to be illustrated as system 100 as one of them of encryption technology.At head end 122, clear content 104 is provided to grouping selection processor 130 together with PSI information 126 and system information (SI) 128.Processor 130 is selected to satisfy and is specified the grouping of alternative condition to encrypt, for example as mentioned above and in the patent application of above quoting " critical packet " of detailed explanation.Use CA A of system and the B of DRM system duplicate simultaneously and encrypt these groupings, so that need not to duplicate and encrypt whole contents.In conditional access system A 118, optionally encrypt this content then.Can also use the B of DRM system 124 optionally to encrypt this content, to produce the content of multiple selective encryption.Then can by cable system 32 will this multiple selective encryption content be distributed to set-top box as 36 and 136.

Set-top box 36 expressions utilize conditional access system 40 to come contents decryption for the set-top box of playing on television set 44 of leaving over.On the other hand, set-top box 136 has the DRM function, uses DRM system 140 that the content of deciphering is provided to television set 144.After CA system 40 and DRM system 140, resident decoder (clearly not illustrating) in each STB, it is to digitally coded television signal decoder, and it is provided to television set 44 and 144 respectively.The same with other forms of multiple selective encryption, can use a plurality of PID to identify the selected content of encrypting discriminatively by a kind of system or other system.

Leaving over STB 36 and new-type set-top box 136 all can adopt with the plaintext receiver, video and the A/V content of encrypting is deciphered fully the identical mode of used mode the usual manner of audio frequency deciphering is come work.If the user does not subscribe the above program of scheme encryption of basis, then the user can't appreciate this content.

The set-top box of authorizing receives the authorization control message (ECM) that is used to obtain access consideration and descramble key.Set-top box is attempted cipher key application in this content.The unencrypted content only needs insusceptibly the descrambler by set-top box.By conditional access system A or the B of DRM system to selecting and the grouping of the content of scrambling is decrypted.Then by with DRM metadata that the DRM content of optionally encrypting is associated in the right to use that defines control encrypted packets by the B of DRM system

Thus, in this way, leave over CA and DRM and can coexist as in the individual cable network.In a variation of present embodiment, the content that DRM encrypts also can according to condition be visited layout and DRM scheme and be encrypted.

Thus, according to some embodiment, the digital television signal method of encrypting is comprised that unencrypted packet in the check dight TV signal is with the identification packet type; Duplicate be designated have packet type grouping to create first and second duplication packets: according to conditional access encryption method first duplication packets is encrypted to create the grouping of conditional access encrypted; According to digital copyright management (DRM) encryption method second duplication packets is encrypted to create the DRM encrypted packets; And the digital television signal of in digital television signal, encrypting with the generation multiple partial with the grouping and the grouping of DRM encrypted packets displacement unencrypted of this conditional access encrypted.

In certain embodiments, the TV programme of encrypting has many unencrypted groupings and many encrypted packets, and wherein encrypted packets comprises first encrypted packets of encrypting by first digital copyright management (DRM) encryption method and second encrypted packets of encrypting by second encryption method at least.

The TV set-top box that conforms to some embodiment has the receiver of receiving digital television, wherein signal has many unencrypted groupings and many encrypted packets, and wherein encrypted packets comprises first encrypted packets of encrypting by first digital copyright management (DRM) encryption method and second encrypted packets of encrypting by second encryption method at least.The grouping of decipher to deciphering with generation by the deciphering of the first or second encryption method encrypted packets.The signal that decoder is suitable for playing on television set with generation to the packet decoding of unencrypted grouping and deciphering.

The method that the multiple partial civision that conforms to some embodiment is deciphered comprises that reception contains the digital television signal of many groupings, wherein some grouping of above-mentioned many groupings is an encrypted packets, wherein above-mentioned encrypted packets comprises first encrypted packets of encrypting by first encryption method and second encrypted packets of encrypting by second encryption method at least, and the remaining part of grouping do not encrypt, and wherein above-mentioned first encrypted packets is encrypted by the digital copyright management encryption method; And grouping to deciphering with generation by one of them encrypted packets deciphering of first and second encryption methods.

The method of the TV signal deciphering that part is encrypted that conforms to some embodiment comprises the TV signal that receiving unit is encrypted, and this TV signal comprises many clear packets, many groupings of encrypting by first cryptographic algorithm and many groupings of encrypting by second cryptographic algorithm; Wherein encrypt by digital copyright management method by the first cryptographic algorithm encrypted packets; Are compatibly required groupings wherein to television signal decoder by the first and second cryptographic algorithm encrypted packets; Wherein above-mentioned clear packets is identified by first packet identifier; Wherein identify by second packet identifier (PID), and identify by the 3rd packet identifier (PID) by the second cryptographic algorithm encrypted packets by the first cryptographic algorithm encrypted packets; And grouping to deciphering with generation by the deciphering of the first cryptographic algorithm encrypted packets.

The computer data signal that is included in thus in the bit stream that conforms to some embodiment has the data segment that the expression unencrypted divides into groups.Another data segment represents that wherein first encryption method comprises digital copyright management (DRM) encryption method by first duplication packets of first encryption method encryption.Another data segment is represented second duplication packets by the encryption of second encryption method.

DRM can be used for one of them of illustrated encryption system among Fig. 2, and Fig. 3 diagram wherein can use DRM to implement the system of multi-enciphering.In this embodiment, use two DRM systems 124 and 230 in a similar manner at cable system head end 222.Set-top box 136 is by previous described operation, but set-top box 236 is used the DRM C of system 240.In this way, the system of Fig. 3 can utilize the DRM system of a plurality of manufacturers.In another embodiment, as previously mentioned, conditional access can be laminated in B of DRM system and C on.

What conform to some embodiment thus, comprises that to the digital television signal method of encrypting unencrypted packet in the check dight TV signal is with the identification packet type; Duplicate be designated have packet type grouping to create first and second duplication packets; According to first digital copyright management (DRM) encryption method first duplication packets is encrypted to create a DRM encrypted packets; According to second digital copyright management (DRM) encryption method second duplication packets is encrypted to create the 2nd DRM encrypted packets; And the digital television signal of in digital television signal, encrypting with the generation multiple partial with a DRM encrypted packets and the grouping of the 2nd DRM encrypted packets displacement unencrypted.

According to some embodiment that conforms to the present invention, digital television signal can be from cable or satellite system head end or gateway machine top box." grouping " can be MPEG transmission grouping, IEEE1394 grouping or IP grouping.The IP grouping can be a variable-length, wherein only " key " data is placed grouping.

Fig. 4 is the flow chart of explanation demonstration cataloged procedure, as the cataloged procedure that uses on the head end 222 of the head end 122 of Fig. 2 or Fig. 3.When 350 receive transmission stream packets, check that this grouping is to judge whether it satisfies the alternative condition of encrypting.If do not satisfy, then 354 will divide into groups as unencrypted expressly divide into groups (C) be inserted in the output stream and transmit.If this grouping satisfies condition, then press CA encryption system A (or press DRM system 240) it is encrypted to produce encrypted packets EA 358.Also duplicate this grouping 362, and press DRM encryption method B it is encrypted to produce encrypted packets.366, this encrypted packets is mapped to auxiliary PID to produce encrypted packets EB.354 encrypted packets EA and EB are inserted into output stream together with clear packets C.Preferably, with obtaining the position that single original packet is encrypted at first in EA and the EB grouping insertion data flow, so that the order of data remains unchanged substantially.

When with the B of DRM system (as Fig. 3 136) when receiving on the STB that conforms to, can utilize as the process of Fig. 5 to come to this program decryption and decoding from 354 output stream.When having main in 370 groupings that receive or during auxiliary PID, judge this grouping be expressly (C) or (EA) that encrypt by the A of CA system (or by the C of DRM system) or in 374 these groupings of judgement by the B of DRM system encryption (EB).If this grouping is expressly, then it directly is sent to decoder 378.In certain embodiments, can use at the relative position of auxiliary packet or front or rear main grouping and inform the main grouping that in stream, is used to replace.Need not the special scrambled state of checking main grouping.If this grouping is the EA grouping, then it is lost 380.If this grouping is EB grouping, then 384 with its deciphering.On this aspect, will assist PID grouping and/or main PID grouping to be remapped to identical PID 388.In 378 service regeulations, to the grouping and the clear packets decoding of deciphering according to DRM system definition.

Another embodiment that Fig. 6 explanation conforms to the present invention wherein goes up the content from the service provider that receives 100% encryption or selective encryption in the set-top box (gateway STB 400) as gateway.Then to the contents decryption of this encryption, at the various electrical equipment of a part that constitutes home network content is carried out multiple selective d RM by gateway machine top box 400 then and encrypt.In this embodiment, for purpose of explanation, two these type of devices are described, use the electrical equipment 404 of DRM technology D and the electrical equipment 408 of use DRM technology E.Device in this home network can be selected from two or more DRM technology.Can be in real time to the content of content decoding or storage multi-enciphering.Beyond the encoded question, for example music content can be that Apple DRM and Microsoft (MS) media player DRM encrypt.This content is the mancarried device as Apple IPOD (supporting Apple DRM) and support MS media player.

In other embodiments, this content can be CA and DRM multi-enciphering.In this type of embodiment, gateway STB 400 can be sent to the encryption of two kinds of forms in the home network.Perhaps, it can only select DRM to encrypt or only select CA to encrypt (if not having the device of DRM function) to send in the home network with clear packets.

DRM encrypts and can share directly content from head end or service provider to include home network in consideration by allowing electrical equipment in the family.Perhaps, can revise DRM by the gateway machine top box and encrypt, with after buying at its particular home network customization content.Perhaps, can export synthesize the DRM encryption based on the control figure of selecting by the gateway machine top box, for example based on IEEE 1394 or Microsoft media player DRM Digital Transmission Copy Protection (DTCP).

The gateway STB 400 of Fig. 6 and the electrical equipment 404 and 408 that is associated can be operated according to the process of Fig. 7, for example start from 450.454, gateway STB from the beginning termination receives the content of encrypting, and it can be that encrypt fully, multiple selective encryption or single selective is encrypted.Use is suitable for the variation pattern of the selectivity multi-enciphering/DRM of purpose electrical equipment (for example 404 of network or 408), at 458 pairs of these contents decryptions, encrypts again 462 then.By network re-encrypted content is sent to target electric appliance 466 then.If from head end convection current multi-enciphering, then this makes it easier realization on gateway STB, because need not to generate the additional copy of grouping.

In 470 contents that on target electric appliance, receive from gateway STB.Then at 474 the contents decryptions of encryption/DRM to encrypting again according to target electric appliance.This process then ends at 480.

Thus, adopt the mode that conforms to some embodiment, digital television signal method of encrypting again is included in receives the digital television signal of encrypting on the gateway TV set-top box; To this digital television signal deciphering; Use with the digital copyright management (DRM) of the first target electric appliance compatibility that will receive this digital television signal and again this digital television signal is encrypted; And send to first target electric appliance by the digital television signal that network will be encrypted again.

With reference to figure 8, with the functional block diagram formal specification as 400 exemplary gateway STB.In this embodiment, tuner/receiver 504 is from cable or satellite head end received content, and digital data stream is provided to decipher 508.If non-selected property ground is stream encryption to digital data, then, wherein select grouping for encryption according to selection algorithm in 512 contents process grouping selection course.If optionally encrypt these groupings, can suppose that then these encrypted packets are groupings of compatibly selecting according to selection algorithm.Duplicate selected grouping 512 then, so that duplication packets is encrypted according to any of available encryption/DRM algorithm that is suitable for the destination apparatus on the device 516 to 520.It is multiplexing to produce the content stream of multiple selective encryption to use indicated CA encryption of destination apparatus or DRM to encrypt these groupings and clear packets 524 then.Via home network interface 530 the content stream of multiple selective encryption is routed to destination apparatus by home network then.

Those skilled in the art are considering above will to recognize that above some example embodiment is based on the processor that uses programming after the principle, as processor 130.But the present invention is not limited to this type of example embodiment, because can use hardware component equivalents, implement other embodiment as specific purpose hardware and/or application specific processor.Similarly, the logic that can use all-purpose computer, the computer based on microprocessor, microcontroller, optical computer, simulation computer, application specific processor, special circuit and/or special-purpose hard lead to connect realizes alternative equivalent embodiment.

Those skilled in the art will recognize after the above-mentioned principle of consideration, under the prerequisite that does not deviate from some embodiment of the present invention, can use magnetic disc store and other form memories for example read-only memory (ROM) device, random-access memory (ram) device, network storage apparatus, optical storage parts, magnetic memory component, magneto-optic memory unit, flash memory, core memory and/or other equivalences non-volatile memory technology of easily becoming estranged implement to be used to implement the procedure operation and process and relevant data of above-mentioned some embodiment.This type of alternative storage device should be considered as equivalent.

Use and maybe can use execution above broadly to implement some embodiment described herein with the programmed processor of the programming instruction of flow chart formal description, these programming instructions can be stored on any suitable electronics or the computer-readable storage medium and/or can transmit by any suitable electronic communication medium.But those skilled in the art will recognize that under the prerequisite that does not deviate from embodiments of the invention, said process can be implemented in any amount of variation and with many suitable programming languages after considering the principle of the invention.For example, under the prerequisite that does not deviate from embodiments of the invention, often can change the order of some operation of execution, can add additional operation or deletion action.Under the prerequisite that does not deviate from some embodiment of the present invention, can add and/or strengthen error trapping, can in user interface and information oblatio, change.Imagine this type of variation and it is considered as the equivalence item.

Though some illustrative embodiment has been described, obviously those skilled in the art will be clear and definite gradually manyly substitute according to above describing, revise, displacement and changing.

Claims (61)

1. one kind to the digital television signal method of encrypting, comprising:

The unencrypted grouping of checking the data in the described digital television signal is with the identification packet type;

Duplicate be designated have described packet type grouping to create first and second duplication packets;

According to conditional access encryption method described first duplication packets is encrypted to create the grouping of conditional access encrypted;

According to digital copyright management (DRM) encryption method described second duplication packets is encrypted to create the DRM encrypted packets; And

The described unencrypted grouping of replacing described packet type with the grouping and the described DRM encrypted packets of described conditional access encrypted in described digital television signal is to produce the digital television signal that multiple partial is encrypted.

2. the method for claim 1 also comprises the digital television signal of described multiple partial encryption is distributed the right to use of the described DRM encrypted packets of described DRM meta data definition together with the DRM metadata.

3. the method for claim 1 is characterized in that described packet type comprises that carrying is to the required packets of information of described digital television signal decoding.

4. method as claimed in claim 3 is characterized in that described carrying comprises the variable-length Internet protocol packets to the required packets of information of described digital television signal decoding.

5. the method for claim 1 also comprises packet identifier is distributed to described unencrypted grouping.

6. method as claimed in claim 4 is characterized in that described packet identifier comprises main packet identifier; And also comprise described main packet identifier is distributed to the grouping of described conditional access encrypted and given described DRM encrypted packets with the auxiliary packet identifier allocation.

7. method as claimed in claim 4 is characterized in that described packet identifier comprises main packet identifier; And also comprise the grouping that described main packet identifier is distributed to described DRM encrypted packets and the auxiliary packet identifier allocation given described conditional access encrypted.

8. the method for claim 1, it is carried out in cable television system head end or gateway TV set-top box.

9. the method for claim 1 is characterized in that described grouping comprises one of them of the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets.

10. an electronic storage medium that is used for store instruction is carried out as claimed in claim 1 to the TV signal method of encrypting when described instruction is carried out on programmed processor.

11. electric transmission medium, the civision that described electric transmission media bearer is encrypted by the described method of claim 1.

12. one kind to the digital television signal method of encrypting, comprising:

The unencrypted grouping of checking the data in the described digital television signal is with the identification packet type;

Duplicate be designated have described packet type grouping to create first and second duplication packets;

According to first digital copyright management (DRM) encryption method described first duplication packets is encrypted to create a DRM encrypted packets;

According to second digital copyright management (DRM) encryption method described second duplication packets is encrypted to create the 2nd DRM encrypted packets; And

In described digital television signal, replace the described unencrypted grouping of described packet type to produce the digital television signal that multiple partial is encrypted with a described DRM encrypted packets and described the 2nd DRM encrypted packets.

13. method as claimed in claim 12, comprise also the digital television signal of described multiple partial encryption distributed together with the first and second DRM metadata that the described first and second DRM metadata define the right to use of the described first and second DRM encrypted packets respectively.

14. method as claimed in claim 12 is characterized in that described packet type comprises that carrying is to the required packets of information of described digital television signal decoding.

15. method as claimed in claim 14 is characterized in that described carrying comprises the variable-length Internet protocol packets to the required packets of information of described digital television signal decoding.

16. method as claimed in claim 12 also comprises packet identifier is distributed to described unencrypted grouping.

17. method as claimed in claim 16 is characterized in that described packet identifier comprises main packet identifier; And also comprise described main packet identifier is distributed to a described DRM encrypted packets and given described the 2nd DRM encrypted packets with the auxiliary packet identifier allocation.

18. method as claimed in claim 12, it is carried out in cable television system head end or gateway TV set-top box.

19. method as claimed in claim 12 is characterized in that described grouping comprises one of them of the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets.

20. carry out as claimed in claim 12 when an electronic storage medium that is used for store instruction, described instruction are carried out on programmed processor to the TV signal method of encrypting.

21. electric transmission medium, the civision that described electric transmission media bearer is encrypted by the described method of claim 12.

22. the TV programme of an encryption comprises:

Many unencrypted groupings; And

Many encrypted packets, wherein said encrypted packets comprise first encrypted packets of encrypting by first digital copyright management (DRM) encryption method and second encrypted packets of encrypting by second encryption method at least.

23. the TV programme of encryption as claimed in claim 22, it is characterized in that described second encrypted packets encrypts by the 2nd DRM encryption method, and wherein said the 2nd DRM encrypted packets have the digital publishing rights different with the digital publishing rights of a described DRM encrypted packets.

24. the TV programme of encryption as claimed in claim 22 is characterized in that described second encrypted packets is according to condition to visit encryption method to encrypt.

25. the TV programme of encryption as claimed in claim 22, it is characterized in that described digital television program being encoded according to mpeg standard, and the grouping of described first encrypted packets of each of wherein said many encrypted packets and described unencrypted is by main packet identifier sign, and each described second encrypted packets of described many encrypted packets is identified by the auxiliary packet identifier.

26. the TV programme of encryption as claimed in claim 22, it is characterized in that described digital television program being encoded according to mpeg standard, and the grouping of described second encrypted packets of each of wherein said many encrypted packets and described unencrypted is by main packet identifier sign, and each described first encrypted packets of wherein said many encrypted packets is identified by the auxiliary packet identifier.

27. method as claimed in claim 22 is characterized in that described grouping comprises one of them of the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets.

28. a TV set-top box comprises:

The receiver of receiving digital television signal, described digital television signal comprises:

Many unencrypted groupings; And

Many encrypted packets, wherein said encrypted packets comprise first encrypted packets of encrypting by first digital copyright management (DRM) encryption method and second encrypted packets of encrypting by second encryption method at least;

Decipher, be used for to by described first or described second encryption method encrypted packets deciphering to produce the grouping of deciphering; And

Decoder is used for the signal that the packet decoding to grouping of described unencrypted and described deciphering is suitable for playing with generation on television set.

29. equipment as claimed in claim 28, it is characterized in that described second encrypted packets comprises the second digital copyright management encrypted packets, and wherein said the 2nd DRM encrypted packets have the digital publishing rights different with the digital publishing rights of a described DRM encrypted packets.

30. equipment as claimed in claim 28, it is characterized in that described digital television signal meets mpeg standard, and the grouping of described first encrypted packets of each of wherein said many encrypted packets and described unencrypted is by main packet identifier sign, and each described second encrypted packets of described many encrypted packets is identified by the auxiliary packet identifier.

31. equipment as claimed in claim 28, it is characterized in that described digital television signal meets mpeg standard, and the grouping of described second encrypted packets of each of wherein said many encrypted packets and described unencrypted is by main packet identifier sign, and each described first encrypted packets of wherein said many encrypted packets is identified by the auxiliary packet identifier.

32. the method that the TV signal that multiple partial is encrypted is deciphered comprises:

Reception comprises the digital television signal of many groupings, some grouping of wherein said many groupings is an encrypted packets, wherein said encrypted packets comprises first encrypted packets of encrypting by first encryption method and second encrypted packets of encrypting by second encryption method at least, and remaining grouping is not encrypted, and wherein said first encrypted packets is encrypted by the digital copyright management encryption method; And

To the grouping of deciphering with generation by one of them the encrypted packets deciphering of described first and second encryption methods.

33. method as claimed in claim 32 also comprises the TV signal that the grouping and the described unencrypted packet decoding of described deciphering are decoded with generation.

34. method as claimed in claim 32 is characterized in that described reception, deciphering and decoding carry out in television equipment.

35. method as claimed in claim 32 is characterized in that described television equipment comprises TV set-top box.

36. carry out coding/decoding method as claimed in claim 32 when an electronic storage medium that is used for store instruction, described instruction are carried out on programmed processor.

37. the method that the TV signal that part is encrypted is deciphered comprises:

Receive the TV signal that described part is encrypted, the TV signal that described part is encrypted comprises many clear packets, many groupings of encrypting by first cryptographic algorithm and many groupings of encrypting by second cryptographic algorithm;

Wherein the described grouping of encrypting by described first cryptographic algorithm is encrypted by digital copyright management method;

Wherein the described grouping of encrypting by described first and second cryptographic algorithm is to the suitably required grouping of decoding of described TV signal;

Wherein said clear packets is identified by first packet identifier;

Wherein the described grouping of encrypting by described first cryptographic algorithm is identified by second packet identifier (PID), and the described grouping of wherein encrypting by described second cryptographic algorithm is identified by the 3rd packet identifier (PID); And

To the grouping of deciphering with generation by the described packet deciphering of described first cryptographic algorithm encryption.

38. method as claimed in claim 37 also comprises grouping and the decoding of described clear packets to described deciphering.

39. method as claimed in claim 37 is characterized in that having the relevant copyright of being determined by the DRM metadata by the described grouping that described first encryption method is encrypted, the part of the TV programme that described DRM metadata component part is encrypted.

40. method as claimed in claim 37, it is characterized in that comprising the 2nd DRM encrypted packets, and wherein said the 2nd DRM encrypted packets has the relevant copyright different with the relevant copyright of a described DRM encrypted packets by the described grouping that described second encryption method is encrypted.

41. method as claimed in claim 37 is characterized in that described grouping comprises one of them of the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets.

42. carry out the method to the TV signal deciphering as claimed in claim 37 when an electronic storage medium that is used for store instruction, described instruction are carried out on programmed processor.

43. a computer data signal that is included in the bit stream comprises:

The data segment of expression unencrypted grouping;

Expression is by the data segment of first duplication packets of first encryption method encryption, and wherein said first encryption method comprises digital copyright management (DRM) encryption method; And

Expression is by the data segment of second duplication packets of second encryption method encryption.

44. the data segment of second duplication packets that computer data signal as claimed in claim 43, the data segment that it is characterized in that first duplication packets that the data segment of described expression unencrypted grouping, described expression are encrypted by first encryption method and described expression are encrypted by second encryption method is the identical data of expression all.

45. computer data signal as claimed in claim 43 also comprises metadata, the copyright that described meta data definition is associated with the described data segment of encrypting by described DRM encryption method.

46. computer data signal as claimed in claim 43 is characterized in that described second encryption method comprises the 2nd DRM encryption method.

47. computer data signal as claimed in claim 43 is characterized in that also comprising metadata, the copyright that described meta data definition is associated with the described data segment of encrypting by described the 2nd DRM encryption method.

48. method as claimed in claim 43 is characterized in that described grouping comprises one of them of the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets.

49. one kind to digital television signal method of encrypting again, comprising:

On the gateway TV set-top box, receive the digital television signal of encrypting;

To described digital television signal deciphering;

Use digital copyright management (DRM) system that described digital television signal is encrypted again, described digital copyright management (DRM) system and the first target electric appliance compatibility that will receive described digital television signal; And

The digital television signal that to encrypt again by home network sends to described first target electric appliance.

50. method as claimed in claim 49 also comprises:

Duplicate selected grouping in the described digital television signal to create first and second duplication packets;

Described duplication packets is encrypted again the grouping that is suitable for the conditional access encrypted of second target electric appliance with establishment according to conditional access encryption method; And

The selected grouping of having deciphered with the grouping and the displacement of described DRM encrypted packets of described conditional access encrypted in described digital television signal is to produce the digital television signal of multiple selective encryption;

Wherein said transmission comprises that the digital television signal of the described multiple selective encryption that will send by described home network sends to described first and second target electric appliances.

51. method as claimed in claim 49 also comprises the described digital television signal of encrypting is again sent the right to use of the described DRM encrypted packets of described DRM meta data definition together with the DRM metadata.

52. method as claimed in claim 49 is characterized in that described grouping comprises one of them of the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets.

53. carry out as claimed in claim 49 when an electronic storage medium that is used for store instruction, described instruction are carried out on programmed processor to the TV signal method of encrypting.

54. electric transmission medium, the civision that described electric transmission media bearer is encrypted again by the described method of claim 49.

55. a gateway TV set-top box comprises:

Be used to receive the parts of the digital television signal of encryption;

Decipher is used for the digital television signal that the digital television signal deciphering of described encryption is deciphered with generation;

First encryption equipment is used for to meet with the mode of the digital copyright management of the first target electric appliance compatibility digital television signal of described deciphering being encrypted again; And

Network interface is used to receive the described digital television signal of encrypting again and the described digital television signal of encrypting is again sent to described target electric appliance.

56. gateway TV set-top box as claimed in claim 55 also comprises:

Second encryption equipment is used for the mode of the second target electric appliance compatibility digital television signal of described deciphering is encrypted again;

Multiplexer is used for the digital television signal of encrypting again from described first and second encryption equipments is made up to produce the TV signal of multiple selective encryption; And

The digital television signal that wherein said network interface receives described multiple selective encryption also sends to described first and second target electric appliances with the digital television signal of described multiple selective encryption.

57. gateway TV set-top box as claimed in claim 55 is characterized in that described network interface sends the right to use of the described DRM encrypted packets of described DRM meta data definition with the described digital television signal of encrypting again together with the DRM metadata.

58. gateway TV set-top box as claimed in claim 55, it is characterized in that digital television signal packetizing, and wherein said grouping comprises the compatible grouping of MPEG, the compatible grouping of IEEE1394 or Internet protocol packets one of them with described multiple selective encryption.

59. gateway TV set-top box as claimed in claim 55 also comprises the branch group selector, group selector selected grouping to be used for encrypting again according to the selective encryption selection algorithm in described minute.

60. gateway TV set-top box as claimed in claim 56 also comprises the branch group selector, group selector selected grouping to be used for encrypting again according to the selective encryption selection algorithm in described minute.

61. gateway TV set-top box as claimed in claim 60 also comprises packet duplicator, described packet duplicator is duplicated selected grouping and is used for encrypting again by many encryption systems, to produce the TV signal of described selectivity multi-enciphering.

Images